MiSTer-devel / MiSTer-devel/Scripts_MiSTer

Certificates issue with update_all.sh that security_fixes.sh does not address

Open
#116 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
122
Forks
49
Avg merge
8h 56m
Merged PRs (30d)
1

Description

If you delete /etc/ssl/certs and then run security_fixes.sh, it should recreate a clean certificate database.
But when update_all.sh is run its fails on:

curl: (77) error setting certificate verify locations:  CAfile: /etc/ssl/certs/cacert.pem CApath: /etc/ssl/certs
Couldn't download https://raw.githubusercontent.com/Toryalai1/MiSTer_ArcadeDatabase/db/mad_db.json.zip : Network Problem

security_fixes.sh already download that file line 185:

curl -kL "https://curl.se/ca/cacert.pem"

put pipes it through an awk script that splits it.

In order to avoid the error on update_all.sh the file cacert.pem should be recorded in /etc/ssl/certs/ not only pipes and split...

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading security_fixes.sh around line 185 and the certificate-related download path in update_all.sh. Reproduce the issue by removing /etc/ssl/certs and running the scripts; the work is done when security_fixes.sh leaves cacert.pem in the expected certificate directory and update_all.sh downloads its database successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
awk, shell
Domain
devops, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.